WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jquery-accordion-slideshow
Published
2023-10-30
Title
Jquery accordion slideshow < 8.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
jquery-archive-list-widget
Published
2025-08-18
Title
JS Archive List < 6.1.6 - Unauthenticated SQL Injection via build_sql_where Function
Slug
jquery-archive-list-widget
Published
2025-08-27
Title
JS Archive List < 6.1.6 - Unauthenticated SQL Injection
Slug
jquery-archive-list-widget
Published
2026-03-06
Title
JS Archive List < 6.2.0 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute
Slug
jquery-archive-list-widget
Published
2026-03-20
Title
JS Archive List < 6.2.0 - Authenticated (Contributor+) PHP Object Injection
Slug
jquery-collapse-o-matic
Published
2022-12-28
Title
Collapse-O-Matic < 1.8.3 - Contributor+ Stored XSS
Slug
jquery-collapse-o-matic
Published
2023-08-22
Title
Collapse-O-Matic <= 1.8.5.8 - Contributor+ Stored XSS
Slug
jquery-collapse-o-matic
Published
2024-04-23
Title
Collapse-O-Matic < 1.8.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jquery-collapse-o-matic
Published
2024-06-14
Title
Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jquery-colorbox
Published
2025-08-22
Title
jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS
Slug
jquery-drop-down-menu-plugin
Published
2025-03-24
Title
jQuery Dropdown Menu <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
jquery-googleslides
Published
2026-05-26
Title
jQuery googleslides <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
jquery-hover-footnotes
Published
2026-06-08
Title
jQuery Hover Footnotes <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax)
Slug
jquery-hover-footnotes
Published
2026-06-08
Title
jQuery Hover Footnotes <= 1.4 - Cross-Site Request Forgery to Plugin Settings Update
Slug
jquery-mega-menu
Published
2014-08-01
Title
jQuery Mega Menu 1.0 - Local File Inclusion
Slug
jquery-news-ticker
Published
2023-10-30
Title
Jquery news ticker < 3.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
jquery-news-ticker
Published
2023-12-16
Title
Jquery news ticker < 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jquery-reply-to-comment
Published
2021-09-21
Title
jQuery Reply to Comment <= 1.31 - CSRF to Stored Cross-Site Scripting
Slug
jquery-t-countdown-widget
Published
2023-01-12
Title
jQuery T(-) Countdown Widget < 2.3.24 - Contributor+ Stored XSS
Slug
jquery-t-countdown-widget
Published
2024-05-22
Title
jQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode
Slug
jquery-tagline-rotator
Published
2021-08-13
Title
jQuery Tagline Rotator <= 0.1.5 - Reflected Cross-Site Scripting
Slug
jquery-validation-for-contact-form-7
Published
2022-06-27
Title
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
Slug
jquery-vertical-accordion-menu
Published
2023-09-11
Title
JQuery Accordion Menu Widget for WordPress <= 3.1.2 - Contributor+ Stored XSS
Slug
jreviews
Published
2022-10-10
Title
JReviews <= 4.1.5 - Reflected Cross-Site Scripting
Slug
jrss-widget
Published
2014-05-28
Title
Jrss Widget <= 1.2 - SSRF